Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changing the admin flag or (2) assigning an arbitrary role.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Foreman 权限许可和访问控制问题漏洞
Vulnerability Description
Foreman是一套用于物理和虚拟服务器中的生命周期管理工具。该工具提供服务开通、配置管理以及报告状态等功能。 Foreman 1.2.0-rc1及之前版本存在权限许可和访问控制问题漏洞。远程经过授权的攻击者可通过改变管理的标志，或分配任意角色，利用该漏洞以特权创建或编辑其他用户获得特权。
CVSS Information
N/A
Vulnerability Type
N/A